Dear @Marriott, your password policy of “8 and 20 letters or numbers only” is terribly naive and insecure.